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IN THE CLAIMS 

Please reconsider the claims as follows: 

1 . (currently amended) A method for monitoring usage of resources allocated 
to a plurality of nodes of a network, comprising the steps of: 

(a) assigning to a node a parameter indicative of the usage of said resources; 

(b) locally monitoring at the node a rate of change of t he usage of said 
resources; 

(c) reporting to a centralized management station of the network when the rate of 
change of t he usage exceeds a firsLpredetermined threshold; and 

(d) initiating, after a "safe" period, a global poll of resources of at least one other 
node from the plurality of nodes of the network by the centralized management station 
in response to reporting from the node. 

2-3. (cancelled) 

4. (previously presented) The method of claim 1 , wherein said parameter is 
indicative of typical usage of the resources in the node. 

5. (previously presented) The method of claim 1 , wherein said parameter is 
indicative of a rate of change of usage of the resources in the node. 

6. (previously presented) The method of claim 1 , further including the step of 
adjusting the usage of the resources at one or more of said nodes. 

7. (currently amended) A method for monitoring usage of a resource In 
nodes of a network, comprising the steps of: 

(a) monitoring usage of the resource in a node to determine when a rate of 
change of t he usage exceeds a first p redetermined threshold; 

(b) reporting to a management station of the network when the rate of change of 
the usage exceeds said first threshold; and 
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(c) initiating, after a "safe" time period, a poll of resources in the nodes of the 
network by the management station in response to reporting from the node. 

8. (currently amended) A method for monitoring usage of resources in nodes 
of a network, comprising the steps of: 

asynchronous reporting to a management station of the network of an event 
when a rate of ch ange of a usaoe of at least one resource of said resources in any of 
said nodes deviates from a prescribed norm; and 

periodic polling of said nodes in accordance with a polling interval, and aperiodic 
polling of said nodes in response to reporting of said even t, wherein a tunable 
parameter is adjusted in response to the usage . 

9. (currently amended) A technique for managing a global resource of a 
network in order to reduce the amount of monitoring related traffic, comprising the steps 
of: 

partitioning the global resource into a plurality of node resources, wherein 
each node resource is assigned to a separate node of the network; 
assigning a budget to each said node resource; 

reporting to a management station of the network when a node exceeds the 
assigned budget as determined using local monitoring of the node resource; an4 

initiating a poll by the management station of node resource usage by the nodes 
of the network in response to receiving reporting from the node wherein the assigned 
budget is exceeded in at least one node; 

determining whethe r the sum of the reported values of the reporting nodes plus 
an upper bound of the value for the non-reportino nodes exceeds a threshold: and 

generating an alarm if the sum of the variables of the nodes exceeds the 
threshold . 

1 0. (currently amended) A technique for managing a global resource of a 
network in order to reduce the amount of monitoring related traffic, comprising the steps 
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of: 

partitioning the global resource into a plurality of node resources, wherein 
each node resource is assigned to a separate node of the network; 

assigning to the node a rate of usage of the node resource; 

reporting to a management station of the network when said rate exceeds a pre- 
determined threshold as determined using local monitoring of the node resource; and 

initiating a poll by the management station of the node resource usage by the 
nodes of the network in response to receiving reporting from the node wherein said rate 
is exceeded in at least one nodei 

determining whether the sum of the reported rates of the reporting nodes Plus an 
upper bound of the r ate for the non-reportino nodes exceeds a threshold: and 

generating an alarm if the sum of the rate of change of the nodes exceeds the 
threshold . 

1 1 . (previously presented) The method defined in claim 8 wherein said nodes 
are selected from the group consisting of routers, switches, bridges, and firewall 
devices. 

12. (previously presented) The method defined in claim 8 wherein said nodes 
are selected from the group consisting of servers, hosts, and layer 4-7 switches. 

1 3. (new) The method of claim 1 , further comprising: 

(e) summing ail the reported rate of change of the usage of the resources; and 

(f) generating an alarm if the sum exceeds a second threshold, else setting the 
"safe" period and repeat steps (d-f). 

14. (new) The method of claim 7, further comprising: 

(d) summing all the reported rate of change of the usage of the resources; and 

(e) generating an alarm if the sum exceeds a second threshold, else setting the 
"safe" period and repeat steps (c-e). 
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